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Hamiltonian oracles are the continuum limit of the standard unitary quantum oracles. In this 
limit, the problem of finding the optimal query algorithm can be mapped into the problem of 
finding shortest paths on a manifold. The study of these shortest paths leads to lower bounds of 
the original unitary oracle problem. A number of example Hamiltonian oracles are studied in this 
paper, including oracle interrogation and the problem of computing the XOR of the hidden bits. 
Both of these problems are related to the study of geodesies on spheres with non-round metrics. 
For the case of two hidden bits a complete description of the geodesies is given. For n hidden bits a 
simple lower bound is proven that shows the problems require a query time proportional to n, even 
in the continuum limit. Finally, the problem of continuous Grover search is reexamined leading to 
a modest improvement to the protocol of Farhi and Gutmann. 



I. INTRODUCTION 

As a physical theory quantum mechanics distinguishes 
itself from its classical counterpart by discretizing certain 
quantities that were previously considered continuous. 
Ironically, it is classical computation that is inherently a 
discrete problem, whereas quantum computation involves 
a continuous evolution of the state. Nevertheless, when 
both computational models are extended to include ora- 
cles, the queries are introduced as discrete events. While 
there are good physical reasons for such an oracle model, 
one is tempted to ask what would constitute half a query 
to an oracle. For a standard quantum oracle that applies 
phases of 1 and —1, half an oracle call could be an ap- 
plication of the phases 1 and i respectively. Surely, two 
calls to the second oracle are at least as powerful as one 
call to the standard oracle. Continuing along these lines, 
one could envision a fraction A of an oracle query that 
applies phases 1 and e l7rA respectively. If 1/A is an inte- 
ger, then that many calls to this new oracle would be at 
least as good as one standard oracle query. 

Taking the limit A — > one arrives at the Hamiltonian 
oracle model, first described by Farhi and Gutmann 
Roughly speaking, the evolution in this model is given 
by the Schrodinger equation 



-i(H j + H'(t))\iP(t)), 



(1) 



where Hj is the Hamiltonian oracle that depends on 
some hidden parameter j, and H'(t) is a time dependent 
Hamiltonian that can be chosen arbitrarily but indepen- 
dently of j. The goal of the problem is to evolve from 
some fixed initial state to a state that contains some in- 
formation of the hidden parameter j. 

The ability to control H' is equivalent to setting H' = 
but being able to apply fast unitaries as often as one 
wishes. The standard oracle model is simply the restric- 
tion that unitaries can be applied only at discrete time 
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intervals. Therefore, from the perspective of the time 
evolution of the Gram matrix, continuous oracle algo- 
rithms appear as smooth curves whereas algorithms for 
the equivalent discrete oracles are piece-wise continuous 
approximations of such curves. The question we ask here 
is: wouldn't it be easier to study the smooth curves? 

This question is in the spirit of recent work by Nielsen 
et al. 0, 9 which proposes a similar approach to the 
study of quantum circuit lower bounds. The idea is that 
differential equations are often easier to solve than differ- 
ence equations, and that many problems become simpler 
in the continuum limit. 

Given that Hamiltonian oracles can be obtained as the 
limit A — > of discrete oracles, most of the standard 
techniques [H H, i| for studying discrete oracles can be 
used to obtain bounds on Hamiltonian oracles. However, 
our goal is not to import bounds from the discrete case 
into the continuous case. Rather we seek to solve Hamil- 
tonian oracle problems by new methods that are intrinsi- 
cally continuous, and in some cases geometric, and then 
export these results back into the realm of discrete oracle 
problems in order to prove new lower bounds. So long as 
the normalization of the Hamiltonian is chosen so that 
the continuous oracle equals O — e~ lH , the minimum 
query time needed to solve the continuous case will be 
a lower bound on the number of oracle calls needed to 
solve the discrete case. 

Of course, it is not a priori clear that the continuum 
limit offers any simplifications. The reductions of both 
Ref. [2| and the present paper map difficult computer sci- 
ence problems into the problem of finding shortest curves 
on manifolds, which is also considered a difficult problem. 
Unfortunately, no new bounds on discrete oracles will be 
obtained in this paper. Rather, we shall examine Hamil- 
tonian oracles for three problems that have been solved 
in the discrete case: Oracle interrogation, the problem of 
computing XOR, and one-item Grover search. However, 
these examples will serve as an illustration of both the 
potential that Hamiltonian oracles present and some of 
the techniques that can be used to exploit them. 

Oracle interrogation is the problem where the hidden 
parameter is an n-bit string which can be queried one 
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bit at a time, and we wish to determine the full hidden 
string. Though n queries are required to solve the prob- 
lem exactly in the discrete setting, van Dam [3] proved 
that n/2 + 0{y/n) queries are sufficient to guess the string 
with very high probability. 

In Section ITVl we show that the continuous version of 
oracle interrogation can be reduced to the study of short- 
est curves on S n with a special metric. For n — 2 the 
metric in polar coordinates can be written as 



ds 2 — — ^ 

7T Z 



tan z 



(2) 



and the minimum query time needed to solve the prob- 
lem exactly is equal to the shortest distance between the 
points with 6 = n/2, = and 6 = n/A, 4> = tt/4. We 
show that a complete set of geodesies can be constructed 
for this metric, and that the minimum query time for 
zero error is about 90% of the time required to query 
both bits separately. This is in contrast with the discrete 
case where exact solutions never allow any speedup. 

For n > 2 the metric on S n is no longer Ricmannian 
but rather of the more general Finsler type. Though the 
minimal length curves will not be constructed for these 
cases, we prove in Section [IV HI a simple lower bound on 
the query time 



t> — + n<i) 

Tre 



0.117n 



(3) 



which applies to the XOR problem (and hence also to ora- 
cle interrogation) in the bounded error setting. This is an 
important bound, for if the Hamiltonian model were sig- 
nificantly faster than the discrete model at solving oracle 
interrogation then it would likely be useless for proving 
good lower bounds. 

The one-item Grover search oracle is studied in Sec- 
tion IIIIl It is a simple enough problem that we can ob- 
serve the transition from the discrete to the continuum 
limit. Given the ability to apply unitaries only at inter- 
vals of length A, the problem can be solved exactly in a 
query time of 



T 



2siii(7rA/2)y'iV-l 



JV 



(4) 



which implies that for large N we obtain a speedup by a 
factor of A/ sin(7rA/2) relative to the standard discrete 
oracle A = 1. The result can be extended to fixed error, 
and in every case half of the above time is needed to solve 
the problem with probability greater than one half. 
In the continuum limit we obtain a query time 
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T = ~—^= arccos — L ~ -VN--+0 \ —= ) (5) 
ttVA^I y/N 2 it \VnJ 

for an exact solution, which we prove optimal. The above 
solution is shorter asymptotically by an additive constant 
of —1/tt than the one found by Far hi and Gutmann 



Though the difference is irrelevant from a practical per- 
spective, the nature of the different solutions is interest- 
ing, and is discussed in Section [ill El A similar improve- 
ment for the case N = 2 was found in Ref. @. 

The analysis technique used in this paper is pre- 
sented in Section [TT] and is a variant on the adversary 
and semidefinite programing approaches [J, Q , where we 
study the evolution of the Gram matrix and use sym- 
metrization to simplify the problem. The problems con- 
sidered herein are sufficiently symmetric that this tech- 
nique works well. It also has the benefit that it allows 
the continuous and discrete problems to be studied to- 
gether using the same notation. The divergence between 
the two formulations can be delayed until the last step 
where we consider the dynamics of the Gram matrix. 

We note that it does not appear that there is a unique 
canonical Hamiltonian for a given unitary oracle. In Sec- 
tion [ITX] we show a pair of unitary oracles that are com- 
putationally equivalent, but lead to different Hamiltonian 
oracles under the process of replacing ones with and 
minus ones with tt. This process also has the undesired 
effect that it breaks complex conjugation symmetry. An 
alternative way of obtaining a Hamiltonian is to double 
the query space and replace a one eigenvalue by two 0's 
and a minus one eigenvalue by it and — n. This essen- 
tially introduces an "arrow of time" qubit that allows 
the choice between the canonical evolution and its com- 
plex conjugate. In fact, it is this form of oracle that is 
analyzed in the oracle interrogation and XOR problems 
as we want to ensure that the lower bounds apply to the 
most general case. For the Grover search problem the 
standard oracle was used. 

The philosophy that has been adopted in this paper 
is that Hamiltonian oracles are a tool in the study of 
the standard discrete oracles. Being able to identify a 
Hamiltonian (possibly from a given set of Hamiltonians) 
is also an important problem in experimental physics 
where the hidden parameter is some physical constant 
which we are interested in measuring [8|]. However, the 
two problems are somewhat different. The Hamiltoni- 
ans that correspond to standard unitary oracles typically 
couple O(logn) qubits, where n is the number of possible 
different queries. Such couplings are generally not found 
in nature. Furthermore, the computational version of the 
problem only concerns itself with one resource: query 
time. In the experimental version of the problem one 
may also need to place bounds on the maximum energy 
of the control Hamiltonian, how quickly it can be changed 
and what complexity can be achieved. Balancing these 
competing resources, however, is beyond the scope of this 
paper. 

In the end, all the Hamiltonian oracles studied in this 
paper were equivalent up to a constant factor to their 
discrete counterpart. It is unclear if such a relationship 
holds in general and if so, how large can this constant 
be? Future work will have to address this question along 
the road to finding new lower bounds from Hamiltonian 
oracles. 
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Prior work 

The first paper to study Hamiltonian oracles from a 
quantum computation perspective is the work of Farhi 
and Gutmann [l[ as discussed above. 

The paper by Fenner Q reexamines the continuous 
Grover search with a goal of finding a Hamiltonian that 
matches the discrete case step by step. However, in 
their construction they allow a total Hamiltonian that 
is a commutator of the oracle and control Hamiltonians, 
whose physical motivation is unclear. 

The paper by Roland and Cerf [l(| also compares the 
discrete and continuous version of Grover search and 
studies the simulation of the continuous algorithm by a 
discrete quantum computer. 

Most of the subsequent work involving Hamiltonian 
oracles studied the problem of spatial search [TTI . H3 |. 
which is a variant of Grover search where the database 
has some spatial arrangement and only local moves are 
permitted. The algorithms for these problems employ 
the continuous quantum walk [l3T ] . 

There are also many papers that study the problem of 
identifying a Hamiltonian, though their goals are gener- 
ally different from ours. For instance, Ref. [l4| studies 
the time-energy uncertainty relation as applied to Hamil- 
tonian identification whereas Ref. [l5| shows that in prin- 
ciple a set of Hamiltonians can be distinguished, though 
the efficiency is not considered. The relation between 
Hamiltonian oracles and identifying Hamiltonians in the 
laboratory was also discussed above: Childs, Preskill and 
Renes Q continued the work on Hamiltonian oracles, 
with a view towards exporting the knowledge of quan- 
tum computation to the realm of experimental physics. 
In the same spirit is the work of quantum parameter es- 
timation for dynamical systems, such as the paper by 
Mabuchi [Hj]. 

Finally, the study of Hamiltonian oracles can be re- 
cast into a number of formalisms including time optimal 
control [ItJ which also greatly benefits from geometric 
approaches. As a Hamiltonian oracle problem can be 
studied as a single bipartite Hamiltonian where one can 
perform arbitrary operations on one side only, this can be 
translated into the language of optimal control by identi- 
fying the oracle Hamiltonian as a drift Hamiltonian, and 
the subgroup of allowed operations K <Z G as those that 
act on only one subsystem. Once again, however, the 
typical Hamiltonians that are of interest in one field are 
fairly different from those of the other. 

II. MODELS AND METHODS 

Below we shall introduce a more formal definition of 
the Hamiltonian oracle model, which will be presented 
in a language that emphasizes its connections to discrete 
oracles. We shall use the description of oracle problems 
as an Alice-Bob game, with Alice taking the place of the 
oracle. This will facilitate the translation of the prob- 



lem into a semidefinite program using Kitaev's construc- 
tion for coin- flipping [181 ] . The resulting semidefinite pro- 
gram will be equivalent to the one of Barnum, Saks and 
Szegedy [f|, though it will be easier to symmetrize. Most 
of the discussion in this section has appeared elsewhere 
and is intended mainly for review purposes and to fix the 
notation used for the rest of the paper. 

In the Alice-Bob game description of the oracle prob- 
lem Alice starts with a hidden string (or superposition 
of strings) in a Hilbert space A. Bob can query Alice by 
sending a message in some space M. . Alice always applies 
some known fixed unitary (or Hamiltonian) to A®M. and 
returns Ai to Bob. Of course, Bob is allowed to have his 
own private Hilbert space B, however it will never be ex- 
plicitly referenced as everything will be described from 
Alice's perspective. 

In the end Bob must guess some property of the hidden 
string, and send his guess to Alice in space M, who 
determines whether it is correct or not. We say that Bob 
wins when Alice accepts his answer, and the goal is to 
maximize this probability. 

In principle, given a strategy for Bob, we need to try 
it against each of the possible hidden strings, one at a 
time. Because we are interested in the worse-case success 
probability, we take the minimum over the success prob- 
abilities for the different possible hidden strings. How- 
ever, as is common in adversary methods, Alice can start 
with a superposition over different possible input strings. 
In such a case the worse-case success probability can be 
calculated by a single run through the Alice-Bob game. 
However, the operation which computes this final worse- 
case success probability is not a physical quantum mea- 
surement but rather just a linear expression involving Al- 
ice's final density operator. Nevertheless, it will be Bob's 
goal to use his interactions with Alice in order to attain 
a final density operator that maximizes the expression 
for the success probability. We shall say more about this 
final operation below. 

Formally, we define an oracle problem by three Hilbert 
spaces A, M. and M! ', together with an initial pure state 
\ipo) on A, a unitary operator O (or Hermitian operator 
H in the continuous case) on A ® M. , and a set of pos- 
itive operators {n^} on A (S> M! labeled by an index x 
which usually ranges over the set of hidden strings. For 
the discrete case we also specify a positive number A 
corresponding to an interval of time. 

A protocol for an oracle problem is given by a positive 
time T (divisible by A in the discrete case), a success 
probability P w in, & P a h of functions p(t) and p(t) for 
< t < T (valued at integer multiples of A for the 
discrete case) and a final matrix p'. We require that 
p(t), p(t) and p' be positive operators on the spaces A, 
A ® M. and A® M' respectively. They must satisfy the 
following equations: 

• Initialization: 

p(Q) = |</>o>W>oU. (6) 
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• Bob's action (for < t < T): 

T±mW)\ = />(*)• (7) 

• Alice's action 

- for discrete time (0 < t < T - A) 

p(t + A) = Tr M {Op(t)0- 1 }. (8) 

— for continuous time (0 < t < T) 

j t p{t) = -iTi M [Hp(t) - p(t)H}. (9) 

• Bob's output: 

Tr M ,[p'} = p(T). (10) 

• Answer verification (for every x): 

P win < Tr[U x p']. (11) 

A standard discrete-time oracle problem will have A = 
1, however, the above formulation allows us to pass to the 
continuous time limit by defining O — e~ lAH and then 
taking the limit A — > 0. 

The basic goal of the problem is to choose the protocol 
p(t), p(t) and p' as to maximize the probability of winning 
Pwin, for a given time T. Of course, eventually one wants 
to invert the relation: fix P W i n and find the smallest T 
for which it can be achieved as a function of some scaling 
of the problem. 

The above formulation should be understood as fol- 
lows: Say Alice has a density operator p(t) on A at a 
given time t. When Bob queries Alice by sending a mes- 
sage in the space M, Alice ends up with a density oper- 
ator p(t) on the larger space A® M.. This operator must 
satisfy the consistency condition given by Eq. (|7|) because 
Bob cannot affect the state of A. Having received Bob's 
message, Alice applies the oracle operation and returns 
M. to Bob, ending up with a new state defined by Eq. (JSJ) 
or Eq. ©. 

To relate the above definition to the standard oracle 
model we let A be the Hilbert space spanned by the set 
of hidden strings. Then O = ^ x \x){x\ A ® O x where 
O x are the standard oracle operators on M. given hidden 
parameter x. For the continuous case we similarly have 

h = j: x \x){x\ a ®h x . 

A good guess for the final operation would be the two- 
outcome POVM {n,7- II}, where II = J2 X \ x )( x \a ® 
\f(x))(f(x)\ M , and f(x) is the target function to com- 
pute such as XOR. We would then declare Bob a winner 
only if the first outcome was obtained, thereby setting 
Pwin — Tr[IIp']. However, this only computes the aver- 
age success probability rather than the worse-case success 
probability. Instead, the correct prescription is to use 

Eq. CP With H, = \x){x\ A ®\f(x)){f(x)\ M ,/\(x\i> )\ 2 , 

so that Trpa;/)'] will be the probability of Bob correctly 
answering given that the hidden string was x. 



For the discrete oracle case deriving the above semidef- 
inite program is fairly simple. Clearly no matter what ac- 
tions Bob performs, Alice's density operators must sat- 
isfy the above equations. On the other hand, because 
Alice starts with a pure state and makes no measure- 
ments, Bob can keep the purification of Alice's state and 
therefore force any evolution consistent with the above 
equations. 

To arrive at the continuous case simply define A = 
2~ k and O = e~ lAH for k e Z+. Given some fixed 
T, let P w in{k) be the maximum over all protocols for 
the discrete oracle problem with a given k. Trivially, 
Pwin(k + 1) > Pwin(k). If we also defined the problem so 
that P W in(k) < 1 for all k, then in the limit k — > oo we 
converge to a well defined P W i n (oo). This can be taken 
as a formal definition of the Hamiltonian oracle prob- 
lem. In this limit we can replace the discrete evolution 
with the continuous evolution given by Eq. ([5]), so long 
as we restrict p(t) to be continuous (or more generally 
measurable if we use the integral form of the equation). 

The more traditional definition of a Hamiltonian ora- 
cle is that there is a set of Hamiltonians {H x } acting on a 
space M. . Bob can append a set of extra qubits with the 
space B on which the Hamiltonians act trivially. He can 
then control the system by either adding an extra Hamil- 
tonian H' , by periodically applying unitary operators, or 
by conjugating H x ® Jg by some time dependent unitary 
of his choosing, so long as these operations don't depend 
on the hidden parameter x. These three variants are all 
equivalent, and equivalent to the model where all three 
activities can be done simultaneously. Though proving 
the equivalence of these models is beyond the scope of 
this paper, it is not hard to see that the above contin- 
uous SDP serves as a lower bound for all the models, 
again by the argument that no matter what Bob does, 
the qubits in Alice's possession are restricted to evolve 
according to the above equations. 

We note in closing that the above SDP can be sepa- 
rated into two problems: The first is finding the set of 
attainable final density operators p(T). The second prob- 
lem involves finding the optimal p' and maximal P W i n 
given p(T). Solving the second problem is often easy, 
leading to a function P W in(p(T)). Therefore, most of the 
effort below will involve searching for the evolution to- 
wards a good final density operator p(T). 



A. On canonical Hamiltonians 

In this section we shall examine an oddity that arises 
in the transition from discrete to continuous oracles. 
Clearly given an oracle unitary, O, there are infinitely 
many Hamiltonians H such that O — e~ lH . However, if 
O is a standard oracle with only eigenvalues 1 and — 1 
then a canonical Hamiltonian can be defined by the pro- 
cess of replacing the one eigenvalues by and the minus 
one eigenvalues by tt. 

Unfortunately, while the above mapping does associate 
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a unique Hamiltonian to each unitary oracle, there are 
cases when unitary oracles of equivalent computational 
power are mapped into Hamiltonians of different compu- 
tational power. 

Consider for instance the oracle with a hidden bit b G 
{0, 1}, and the two unitary oracles 



O = 



















1 




Oi= (o 


-1 


■ 

















(12) 



where the complete oracle in the notation of the previous 
section would be O = \0)(0\ A ® O + \1){1\ A ® O x . A 
different pair of oracles for the same problem arc given 
by 
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(13) 



with O' defined similarly. The two pairs of oracles are 
clearly equivalent, as one can simulate one with the other 
by simply applying a phase flip to the third basis state. 

Now consider the Hamiltonians obtained from the 
above unitaries by the standard eigenvalue replacement 



and 



'0 (P 
H = n ( 
,0 0, 



'0 ' 
H' = n | 



Hi =7T 




(14) 



v0 I, 



'Q 0> 
:: I 1 
,0 0; 



(15) 



where again H = \Q){Q\ a ®Hq + \1){1\ a ®H\ and similarly 
for H'. With the first oracle pair it takes one unit of time 
to perfectly distinguish between the two Hamiltonians, 
whereas with the second pair only half a unit of time is 
required. 

In general, the existence of many choices for the Hamil- 
tonian oracle is not a problem. So long as the normaliza- 



tion is chosen so that 



iH 



is computationally equivalent 



to the discrete oracle that needs lower bounding, one may 
choose any Hamiltonian that is easy to study. 



B. Reduction by preponderance of symmetry 

In the next two sections we shall show how oracle prob- 
lems with large amounts of symmetry can be simplified 
because they always have an optimal solution that shares 
the symmetry of the problem, and therefore the search for 
the optimal solution can be conducted over the smaller 
space of density operators that are invariant under the 
action of the symmetry group. 

We say that a group G is compatible with an oracle 
problem |t/> ), O (or H for the continuous case), and {n^} 



if there exists unitary representations R A on A, Rm on 
M. and Rm 1 on M! such that for all g € G we have 



Ra(9Mo) = l^o), 

R{g)OR{g- 1 ) = O, 

R^HRig- 1 ) = H, 

{R'ig^R'ig- 1 )} = {ILJ, 



(16) 
(17) 
(18) 
(19) 



where for simplicity we have introduced R(g) = Ra{q) ® 
Rm{9) an d R'{g) — Ra(q) ® Rm'{s)- I n the last equa- 
tion, the symmetry does not need to leave the operators 
Il x element- wise invariant, but must leave the set invari- 
ant. 

Given a solution p(t) to a G compatible oracle problem, 
we can define for g e G 



p g (t) = R(g)p(t)R(g- 1 ) 
for t € [0, T] and similarly 

p' g = R\g)p / R\g- 1 ) 7 



(20) 



(21) 



which will be solutions to the oracle problem with the 
same success probability (as can easily be verified). Nat- 
urally, the reduced density operator on Alice's side will 
be Pg (t) = Tr[p g (t)] = R A {g)p{t)R A (g- 1 ). 

Because the equations are all linear, we can also take 
linear combinations of solutions. Given a solution p(t) 
define 



(22) 



S6G 



and similarly for p' G . These must also be a solution of the 
oracle problem with the same success probability as p(t) 
and p'. Note that this is a non- vanishing solution because 
p{t) = cannot be a solution of the equations. In fact, 
the equations impose conservation of trace so that for all 
t we have Tr[p G (i)] = (ipo\ipo)- 

We call a solution G-invariant if for all g € G and t G 
[0,T] it satisfies R(g)p(t)R(g^ 1 ) = pit), and furthermore 
R' (g)p' R' (g~ 1 ) = p' again for all g <G G. AG invariant 
solution will also imply that RA{9)p{t)RA{d l ) = pif) 
for all g € G and at all times. 

It is not hard to see that given any solution p(t), the 
solution pa{t) constructed from it as above will be G- 
invariant, and will have the same probability of success. 
We have therefore proven the following lemma: 

Lemma 1. Given an oracle problem that is compatible 
with a group G, the set of success probabilities P W i n that 
can be achieved with query time T will not be altered if 
we restrict the space of solutions to those that are G- 
invariant. 

The lemma allows us to concentrate only on G- 
invariant solutions when studying both upper and lower 
bounds. 
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C. Further reductions for standard oracles 

Up to this point the set of allowed oracle unitaries or 
Hamiltonians has been left unrestricted, but now we shall 
focus on the standard oracles that change the phase of 
the states in M. based on the value of the hidden oracle 
string. 

Given a basis {b')^} for A and a basis for M, 

which we refer to as the computational bases, we say that 
O or H is in standard form if it can be written as 

^C jtk \3){j\ A ®\k)(k\ M , (23) 

j,k 

where the coefficients Cj k are real numbers in the case of 
a Hamiltonian oracle and phases in the case of a unitary 
oracle. 

We further assume that the oracle problem is compat- 
ible with a group G and that the action of this group on 
the space M. is by permutation of the basis: 

R M {9)\k) M = \s{g)k) M (24) 

for all k and g G G, where s(g) is a homomorphism from 
G to the symmetric group Sm and M — \M\. For sim- 
plicity we assume here that the index set k ranges from 1 
to M so that Sm acts naturally on the index set by per- 
mutation. In such a case the symmetry group G can be 
extended to Gq — (2y M x G, where the semidirect prod- 
uct is defined by (x' , g')(x, g) = (x' ® s(g')x,g'g) with 
x G (7L2) M and M-digit binary string and s(g') G Sm 
acting on it by permutation. 

We can define representations of Gq on the spaces A 
and M! by R A (x,g) = Ra{9) and R M ,(x,g) = R M '(g)- 
The nontrivial extension is the representation of Gq on 
M. defined by 

R M (x,g)\k) = (-ir^\s(g)k), (25) 

where Xk denotes the fcth bit of x. It is simple to verify 
that if the a standard oracle problem is compatible with 
G, then it will also be compatible with Gq. 

A GQ-invariant operator p on A ® M must have the 
block diagonal form 

5>*®|*><*U (26) 
k 

where the are positive operators on A. The block 
diagonalization follows simply by considering the action 
of group elements of the form (x, 1), where a; is a string 
with a single 1 entry. 

The (Jfc are further restricted as follows: 

• The operators a% must be invariant under the stabi- 
lizer of fc, that is, for all g G G such that s(g)k = k 
we must have R^(g)akRA{g 1 ) = 

• If there exists a g such that s(g)k = k' then ay = 
RA{g)^kRA{g~ 1 ) for any such g. 



The condition s(g)k — kl for some g G G defines an 
equivalence relationship on the integers [M], and allows 
us to divide them into equivalence classes. The most 
general G-invariant p can therefore be specified by only 
one matrix ak for each equivalence class, which must be 
invariant under the stabilizer of k. 

Of course, all of the above discussion would be moot if 
we had just begun with the symmetry group Gq in the 
first place. However, in this paper we shall choose G to 
correspond with the symmetry of the classical problem, 
and then Gq will be the extended symmetry that appears 
in the quantum case. 

We conclude this section by noting how the symme- 
try simplifies density operators p on A (as opposed to p 
on A (8 M as we have been discussing thus far) . If the 
decomposition of the representation Ra into irreducible 
representations contains at most one copy of each irrep, 
then by Schur's lemma the most general G-invariant p 
has the form 

a 

where a ranges over the irreps appearing in R^, P a is the 
projector onto the irrep, and the a} a are non-negative con- 
stants that sum to (i/'ol'/'o) which we assume here is one. 
It will be convenient to deal with the vectors (eto, ai, . . . ) 
which specify a point on the unit sphere for some dimen- 
sion. This point on the sphere will be a complete de- 
scription of the state of the protocol at a given instant of 
time, or equivalently, of Bob's knowledge at that instant 
of time. 



III. ONE-ITEM GROVER SEARCH 

Here we study the Grover search problem under the 
promise that exactly one item is marked. The goal, as 
usual, is to identify the marked item. Though this prob- 
lem has been extensively studied in the literature, it will 
provide a good example for the ideas discussed in the 
previous section, and as a comparison of the discrete and 
continuous oracle models. Furthermore, we shall find a 
modest improvement to the protocol found by Farhi and 
Gutmann 

Our strategy below, after defining the problem in the 
new notation, will be to identify the symmetry group 
of the problem and use it to reduce the search space of 
potential solutions. Within this reduced space we will 
then identify the initial state and the set of final states 
from which the marked state can be identified with small 
error. Finally, we study the dynamics needed to evolve 
from the initial state to these good final states, which will 
tell us the query time needed to solve the oracle problem. 
Note that it is only in this last step that the discrete and 
continuous oracle models need to be handled separately. 
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Problem definition 



Fix an integer N > 1 and define 



A = span{|j) for j£ [JV]}, (28) 
X = M' = span{|j) for j g {0} U [AT]}, (29) 



and on these spaces we define 



|V>0> 



1 N 

3=1 



JV 



H = TElj')0'U®li)0'l 



M> 



(30) 
(31) 



i=i 



O a 

n, 



I-(l-e-** A )X;ii)(jU®bWU (32) 
N\3){j\ A ® for je[iV]. (33) 



Note that the normalization of is chosen so that Oa = 
e _ , and the unit of time is chosen so that A = 1 
corresponds to the standard discrete time oracle. In both 
cases, the query space H has a state |0) which is left 
invariant by H and O. This is the null query 

The normalization of |?/>o) to a unit vector, though nat- 
ural from a quantum mechanical perspective, will im- 
ply that Alice's reduced density operator will not be the 
Gram matrix but rather the Gram matrix scaled by 1 /N . 
This is also the source of the factor of N in the opera- 
tors ITj . After the symmetrization below we will be able 
to replace the N projectors {IT, } with the single projec- 
tion operator II = . Hj/N because the worse-case and 
average-case success probabilities will be equal. 



B. Symmetrization 

The natural symmetry group for the problem is G = 
Sn which acts by permutation on A and on the last N 
states of Ai, but leaves \0) M invariant. With these defini- 
tions the oracle is compatible with the symmetry group. 

The most general density matrix p on A which is G- 
invariant is given by 



P = x\+)(+\ + y(i-\+)(+\ 



(34) 



The two parameters are related because we require x + 
(N — l)y — Tr[p] = (f/'ol^o) = 1- Therefore p (and hence 
the state of the system at any given time) depends on 
the single parameter x. 

We now turn to the symmetrization of operators p on 
A ® M ■ As the oracle is of standard form, and the sym- 
metry group acts by permutation on M. 1 we can apply 
the results of Section Ul CI The most general p consistent 
with the symmetries of the problem has the form 



CO 



M 



(35) 



where g\ j is any element that maps 1 to j. 

The matrix <7o must be invariant under the complete 
Sn so that its most general form is 



cr =^o|+)(+|+yo(/-|+)(+|), 



(36) 



where positivity demands xq > and yo > 0. 

On the other hand, the matrix o\ need be invariant 
only under the subgroup Sjv-i that leaves |1) M invariant. 
Under the full Sn we saw that A decomposes into two 
irreps: the space spanned by |+)^ and its orthogonal 
complement. Under the restriction to Sn-i, the first 
representation will naturally still be irreducible, but the 
second one will decompose into the space spanned by 



N -I, 



N 



ID - 



i 



TV 



N(N - 1) 



£li> (37) 



and its orthogonal complement, leading to a decomposi- 
tion of A into three irreps. However, since the first two 
are both the trivial representation, Schur's lemma does 
not prevent them from sharing off-diagonal terms and 
therefore the most general Sn-i invariant operator on A 
has the form 



0"! 



(1+) hi)) 



(38) 



where = (I — |+) (+| — | — i) (— 1|) is the projector onto 
the orthogonal complement of the space that contains | +) 
and Positivity of a\ requires a>0, c>0, d> and 
\b\ 2 < ac. 

To conclude, we compute the partial trace of a given p 
of the above form. It is given by the sum of the projec- 
tions of <ii onto the invariant subspaces of the full Sn- 



Tr 



M[P\ 



(xo + aN)\+)(^ 
N 

+ {y ° + C — 



(39) 



C. Boundary conditions 

We now proceed to treat p, and consequently x, as a 
function of time. The initial condition at time t = is 
fairly simple p(0) = \ipo}{ipo\ and hence x(0) = 1. 

We need to determine what values for x(T) are accept- 
able as final conditions. The final probability of success 
Pwin depends only on x(T). Because of the symmetry 
of the problem, the optimal measurement is the pretty- 
good measurement and the success probability is given 
UKMUll by 



IfTr 



N 

l( v ^(r) + v /(7v-i)(i-x(T)))' 



(40) 



In particular, a zero error outcome requires x(T) 
1/N. On the other hand x(T) — 1/2 implies P W i n 
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1/2 + \/N — 1/N, so that a solution with some fixed 
error P w i n >l/2asiV— > oo requires at a minimum 
x(T) < 1/2. 



D. Dynamics 

Bob's task is now clear. He must use the dynamics of 
the system so that x evolves from 1 at time t = 0, and 
decreases as quickly as possible, past 1/2 for constant 
error and stopping at 1/N for zero error. 



1. Continuous time 

We begin with the continuous case, with dynamics 
given by Eq. (JOj) , which leads to a differential equation 
for x(t): 



dx(t) 
dt 



= -i{+\Tr M [Hp{t)-p{t)H}\+) 



N 



V 3=1 

= 2irVN~llm[b(t)}. 



(41) 



The differential equation for y{t) is uninteresting, as it 
is related to the above by the normalization condition 
x(t) + (N - l)y(t) = 1. 

Bob controls the dynamics via his choice of p(t) at 
each time, which he clearly would like to choose so that 
the imaginary part of b(t) is as negative as possible. By 
positivity of p we know that |fo(t)| 2 < a{t)c(t) whereas the 
constraint Tr^vi[/5(t)] = p{t) translates via Eq. ([39]) into 
x{t) = x {t) + a(t)N and y(t) = (1 - x{t))/{N - 1) = 
y + c{t)N/(N - 1) + d(t)N(N -2)/(N-l). Combining 
these constraints we see that 



1 



Im[b(t)} < -Vxm 



x(t)) 



(42) 



with equality clearly achievable. The evolution of x(t) 
following the optimal protocol is therefore given by 



dx{t) Vn~i r —- — 

= -27T — Vx(t)(l - x(t)) 



dt 

which is solved by 



N 



x(t) = COS 7T 



~N 



(43) 



(44) 



where we have already included the initial condition 
x(0) — 1. Continuous Grover search can therefore be 
solved exactly in a time 



1 

T =-- 



N 



TT^/N -1 



1 1 r~ 



(45) 



whereas solving with a fixed error greater than one half 
requires a query time of at least N/ (4y/N — 1). 



2. Discrete time 



For the discrete case we have 



x(t + A) = (+\Ti M [Op(t)0- 1 }\- 



(46) 



where 



<+|Oi|+> = 1 - 
(+10x1-1) = 



1 



-27rA 



N 

(1 - e-^^yTW^l 
N ; 



(47) 
(48) 



and Ox = I— (1 — e I7r )|1)(1| is the oracle operator when 
query one is issued. Note that |a| 2 + |/3| 2 = l. 

Before solving the general case of the above equation, 
we must address what happens in the last query. Assume 
that at some time t we have x{t) > 1/N but for some 
setting of the parameters we can achieve x(t + A) < 1/N. 
Because x(t + A) is continuous in the parameters of pit), 
and we could have also issued a null query (i.e., setting 
a(t) = b{t) = c(t) = d(t) = 0, x (t) = x(t), and y (t) = 
y(t) so that x(t + A) = x(t)) there must be a query such 
that x{t + A) = 1/N, and therefore the problem can be 
solved exactly in t + A queries. 

For all other times we know that for any choice of p[t) 
we must have x(t + A) > 1/N. In this case Bob simply 
wishes to make x(t + A) as small as possible. Given 
that any solution with xo(t) > we can always find a 
better solution by choosing Xo(t) — and a(t) = x(t)/N. 
The only two constraints in which a(t) or Xo(t) appear 
are x(t) = xo(t) + Na(t) which is satisfied by the new 
variables, and a(t)c(t) > \b(t)\ 2 which is also satisfied as 
we have not decreased a(t). 

Similarly, given any assignment of the above variables, 
we can always set 



b(t) 



Va(*)c(*)f4 
\a(3\ 



(49) 



which will not increase x(t + A). With these simplifica- 
tions, the optimal solutions must be of the form: 



x(t + A) =N\ |a| 



N 



(50) 



for some c(t) £ [0, (1 — x(t))/N]. However, since by as- 
sumption x(t + A) cannot be zero, it must be minimized 
by c(t) = (1 — x{t))/N . We are left with the recursive 
relation 

x(t + A) = ^/xjt) - Ifl y/1 - x(t)Y (51) 
which is solved, with starting point x(0)==l, by 

x{t) = cos 2 (arcsin(|/3|)^ (52) 
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yielding an exact solution in a query time 

1 



T = A 



arccos 



2sin(7rA/2) x /A r -l 



JV 



(53) 



As before a fixed error greater than one half can also be 
attained in approximately half the time. 



E. Discussion 

Just as in the discrete case, the optimal continuous 
protocol for one-item Grover search can be described as 
a rotation in the two-dimensional subspace that contains 
the vectors |+) and the marked state This rotation 
is effectuated by the Hamiltonian 



Hiatal =H j +H' =n\j){j\ + 



N- 2 
N 



l+X+l, (54) 



where Hj is the oracle Hamiltonian if the hidden string 
is j, and H' is the j independent Hamiltonian that de- 
fines the algorithm. In the orthonormal basis |+) and 
|— j) for the relevant two dimensional subspace the above 
equation reads 



H 



total 



7T 

N 



1 



y/N-l N - 1 



N-2 




7r(JV-l) r iry/N - 1 

-I H ~ o x 



N 



N 



(55) 



where is the natural generalization of Eq. (|37p . and 
a x is the Pauli x operator. The evolution is given by 



p -i-Kt{N-i)/N 



cos 



ict-fN - 1 
N 



(56) 



and at time T — N/ (ir^N — 1) arccos 1/VN we end up 
(ignoring the global phase) in one of the states 



~ lSm l N ' 



|^.(T)) ex -L|+) - iyj ^l-i) = U\j), (57) 



where U = At this time all N states 

become mutually orthogonal, and therefore the N differ- 
ent Hamiltonian oracles can be perfectly distinguished. 

In the protocol of Farhi and Gutmann [![, they used 
oracles of the form Hj = E\j)(j\, and therefore to com- 
pare the results we need to set E = tt. With our notation 
their total Hamiltonian is given by 



H, 



total 



= H 3 +H' = v\j){j\ 



-)(" 



(58) 



and after a time of exactly T = yN/2 this Hamilto- 
nian will evolve the state |+) into the state This 
is marginally slower than the optimal time found above 



which can be expanded as v -/V/2 — 1/tt + 0(1/ v N). For 
N = 2 the difference is exactly given by a factor of \[2 
as pointed out in Ref. Q. 

The practical difference between the two protocols is, 
of course, insignificant. Nevertheless, it is interesting to 
see how it arises, as generalizations of this trick will be 
useful later. In the relevant two dimensional subspace for 
a given j, we can study the state on the Block sphere, 
where we take the north pole to be the initial state |+). 
The traditional goal is to evolve to the state \j) located 
near the south pole, and the Hamiltonian of Eq. ([58]) 
follows the obvious path that connects them. However, 
the ability to add in a Hamiltonian of arbitrary strength 
proportional to |+)(+| is equivalent to being able to do 
arbitrarily fast rotations around the vertical axis. There- 
fore, the set of points on a circle of constant latitude 
should all be regarded as a single point, and the optimal 
protocol involves choosing at each time the correct lon- 
gitude so that the evolution southwards is greatest. In 
particular, the protocol need not arrive at \j) but may 
end at any of the other points of similar latitude, which 
the optimal protocol does. 

The Farhi and Gutmann protocol [l| does achieve a 
more general goal: mainly given an oracle Hamiltonian 
H = tt | to) (to I, where the marked state \m) is arbitrary, 
evolve into the marked state (in a time that depends only 
on the overlap of the marked with the initial state) . Our 
protocol essentially preassumes that the marked state is 
always a computational basis state. However, if our goal 
is to identify the Hamiltonian, then producing a copy 
of the marked state is only useful if the set of possible 
marked states is orthogonal, in which case we may as- 
sume that they belong to the computational basis. 



IV. ORACLE INTERROGATION 

We now turn our attention to the Hamiltonian oracle 
version of Oracle Interrogation 0], where the oracle has 
a n-bit string which can be queried one bit at a time, 
and the goal is to output the complete n-bit string. The 
problem is important as it serves as an upper bound on 
all problems where the goal is to output some function 
of the n-bit string. 

We shall also briefly examine the XOR problem, where 
the goal is simply to output the XOR of the above n bits. 
In both the discrete and continuous oracle setting, this 
problem is nearly as hard as outputting the entire n-bit 
string. 



A. Problem definition 

Fix an integer n > 1, let N = 2 n , and define 

A = spamj» for x e {0,1}"}, (59) 
M = span{|j, k) for j G {0} U [n],k S {0, 1}}. (60) 
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We also introduce the final output spaces as M! = A for 
oracle interrogation and M' XOR = span{|0), |1)} for the 
XOR problem. On these spaces define 



o 

H 

Hj^xor 



(61) 



X)(-i) aj+fc k)^u®u. *><j>*u (62) 



7T 



(63) 

N\x){x\ A ®\x){x\ M „ (64) 
iV|x)(a;|_ 4 <8> |xor(x)>(xor(x)| iM , , (65) 



where x ranges over the n-bit strings, j = 0, . . . , n and 
k £ {0, 1}. We use the notation Xj to denote the jth bit 
of x, and define xq — 0. We also use xor(ie) to denote the 
XOR of the n bits of x. The answer verification operators 
for oracle interrogation are {II X for x £ {0, 1}™} whereas 
for the XOR problem they are {II X! xor for x £ {0, 1}"}, 
otherwise the problems are identical. 

Though the oracle O may look somewhat peculiar, it 
can be thought of as the regular oracle that applies a 
phase (— l) Xj to query state \j), followed by the a z Pauli 
operator on the last qubit. Since this operation is entirely 
on the message side, and could equally well be applied 
by Bob before or after the query, and therefore offers 
no extra computational power. As usual, Bob can also 
request a null query on the state |0). 

In the continuous case, the extra bit k can be thought 
of as an arrow of time. For k = the oracle applies 
one Hamiltonian and for k = 1 the oracle applies minus 
the same Hamiltonian. It is not clear whether one of 
these blocks is computationally equivalent to the com- 
plete Hamiltonian. This is an interesting open question. 
Unfortunately, the symmetrization approach to studying 
the oracle requires both blocks. 

The normalization of H is chosen so that e~ tH = —iO, 
and hence the query time for the Hamiltonian oracle 
problem is a lower bound on the number of queries for the 
discrete oracle problem. The normalization does have the 
unfortunate property that at time £ = 1/2 one can solve 
the n = 1 case exactly. However, the unitary e~ lH ^ 2 is 
equivalent to performing the identity for a hidden zero 
bit, and applying phases of ±i for the hidden one bit, 
and these operations cannot simulate the standard one 
bit query. 



B. Symmetrization 

The natural symmetry group of these oracle problems 
is G = (Z2)' 1 xi S n , with a multiplication rule given by 
(x',s')(x,s) = [x 1 © s'(x),s's) where s £ S„ and x is 
an n-bit binary string. The action of s on x is given by 
permutation of the bits. 



The group G has a set of representations defined by 

R A (x,s)\y) A = \x®s(y)) A , (66) 

RM(x,s)\j,k) M = \s(j),x a (j)®k) M , (67) 

RM'{x,s)\y) M , = \x®s(y)) M ,, (68) 

R M ^{x,s)\k) M ,^ = \xoK(x)®k) M ,^. (69) 

With these definitions, both oracle problems are compat- 
ible with G. 

We begin the symmetrization by describing the most 
general positive operator p on A that is G-invariant. We 
shall be working in the Hadamard basis for A defined by 



H® n \x] 



A- 



(70) 



where H is the qubit Hadamard operator. In this basis, 
the representation R A acts by 



R A (x,s)\y) = (-l)\ x(Bs ^\s(y)), 



(71) 



where |x| denotes the Hamming weight. Invariance under 
G implies that (x\p\y) = (x\R A (g- 1 )pR A (g)\y) . Using 
elements of the form g = (x',1) we see that (x\p\y) = 
for x ^ y. Furthermore, using g = (1, a) we see that 
depends only on the Hamming weight of x. We 
can therefore write the most general G-invariant p as 



i=o 



(72) 



The normalization is chosen so that Tr[p] = 1 implies 

E 



j 



1 and therefore the vector (ao, . . . , a n ) is a point 
on the unit sphere 5™ embedded in E n+1 . Positivity of p 
requires > 0, which in turn requires aj to be real. A 
unique set of p matrices can be generated by restricting 
to dj > for all j. 

We now turn to the symmetrization of p. As G acts 
by permutation on M, we can use the results of Sec- 
tion III CI which provide us with a decomposition of the 
most general p as 



M ■ 



(73) 



j=0 fe=0 



where cto.o and <Jq,i must be G-invariant and the restric- 
tion on the remaining a matrices is discussed below. We 
expand 



/ 



1 



n 



(74) 



As the evolution will only depend on the sum <7o,o + &o,i 
(i.e., they both correspond to null queries), it will be 
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0,0 + Cj',li which are required surements by 



convenient to define Q 
to be non-negative. 

The remaining matrices are all related to each other 
by <?j,k — Ra{9)o'i,oRa(9~ 1 ) for any g £ G such that 
Rm(9)\^,0) m = \3i^)m' ^ n P ar ticular, 171,0 must be 
invariant under the subgroup H of G that leaves |1,0)^ 
invariant. We can write H = (i^)™" 1 ^ S n -i. 

From Eq. (f?2"|) we see that A decomposes into n + 1 
irreps of G given by span{|:r) for \x\ = j} for j = 0, . . . , n. 
The j — and j — n irreps are both one dimensional and 
therefore will also be irreps of H. Under the restriction to 
the subgroup H , the other irreps each split into two. An 
irrep of vectors with Hamming weight j will split into the 
vectors that have a zero in the first slot (which will be an 
irrep of H consisting of Hamming weight j vectors), and 
the vectors that have a one in the first slot (which will be 
an irrep of H consisting of Hamming weight j — 1 vectors). 
In total, we end up with two copies of each of the n irreps. 
Each pair of irreps can share off diagonal elements but 
otherwise the matrix must be block diagonal. Therefore 
the most general 77-invariant operator on A has the form 



01.0 



E 

3=0 



(|6) |i» 



(75) 



2n 



n- 1 

3 



E 



z£{0,l} n 



where we have decomposed A into the first qubit and 
the remaining n — 1 qubits. The notation means that, 
for instance, |0) ® \z) — \x) where x is the n-bit string 
obtained by concatenating and z. Positivity of a±fi is 
equivalent to otj > 0, 7^ > and cxjjj > \/3j\ 2 for every 
3- 

Note that the above form for an H-invariant ai^ could 
also be obtained directly by noting that i7-invariancc im- 
plies that (x\aifi\y) can depend only on the Hamming 
weight of the last n — 1 bits of x © y. 

The normalizations above have been chosen in order to 
simplify the equation p = Ttm [p] which is now equivalent 
to 



Co + «o 

Q + a 3 + 7j_ 

(n +7n-l 



3 = 0, 
1 < j < n, 

j 



(76) 



n. 



C. Boundary conditions 

The initial condition is simply given by ao = 1 and 
aj = for j > 0. For the final probabilities of suc- 
cess, we note that after symmetrization, the probability 
of correctly outputting x or xor(i) is independent of the 
hidden string x, therefore we can replace the final mea- 



n = 52\x)(x\ A ®\x){x\ M , (77) 

X 

n XO R = El^L® l XOR ( a 0)( XOR ( a! )l > Mi o , ( 78 ) 

X 

for the oracle interrogation and XOR problems respec- 
tively. The final step is then a standard state discrimi- 
nation problem dependent only on p(T). 

For oracle interrogation, p(T) is proportional to the 
Gram matrix of the states to be distinguished. Since it is 
diagonal in the Hadamard basis, \J p(T) is also diagonal 
in the Hadamard basis and hence its diagonal elements 
in the computational basis are all equal. Just as in the 
Grover search case above, this implies [ljlliQlliH that the 
optimal measurement is the pretty good measurement 
and the success probability is given by 



P win (p(T)) - -(TrVpM 



(79) 



Ms 



"Wr)| =(a(T)-a f f 



where a(T) = (ao(T), . . . , a n (T)) which involves the com- 
ponents of p(T). The target vector a/ with components 




(80) 



has unit length, and so a zero error solution requires 
a(T) = a f . 

The last step in the XOR problem involves the state dis- 
crimination of two mixed states. As Bob has the purifica- 
tion of p{T), we can write the joint state as ^/p(T)®/|$) 
where |$) = ^2 X \x) A ®\x) M , . The two states to discrim- 
inate are therefore given by 



Vk = Tr.4 



= (yp-{f)p k ^p-{T)) , 



(81) 



where k € {0, 1}, Pk is the projector onto states \x) with 
xor(i) = k, and the transpose is taken in the compu- 
tational basis. The normalization is set to Tr[?7fc] = 1/2 
which is the a priori probability. Now we can use the 
result of Helstrom for two-state discrimination [2^], so 
that 



P wm {p{T)) 



Tr (% + m + 1% - m\) 
1 



(82) 



Tr k/p(T)(i%--Pi)Vp(T) 



1 1 " 



3=0 

where in the last step we use the fact that Pq — Pi = 
af n in the Hadamard basis, and so the matrix inside the 
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absolute value is block diagonal with blocks pairing \x) 

and \x® 1 ■ • • 1). 

From the above discussion we can see that the zero 



error XOR final states satisfy a 3 



i_j for all j. Fur- 



thermore if dj — for j > n/2 then P w in < 1/2 for both 
the XOR and oracle interrogation problems. In fact, we 
have for both problems 



P < 

1 win _ 



\ 



E 



(83) 



where as before [ ] sym is the projection onto the symmet- 
ric subspace and Hio = ■§ J2 X (~ l) Xl \x}(x\. In each of 
the 2x2 blocks comprising cr^o, -ffi.o is proportional to 
the Pauli a x operator (as the blocks are in the Hadamard 
basis) and hence each block leads to a calculation of the 
form 



1 

1 



atj /3j 
Pi H 



a ; 



PS 

IS 



(87) 



-2ilm[(3 3 ] 
<*S - lj 



IS - a 3 

2ilm[(3 J 



which leads to the differential equations 



D. Discrete oracle dynamics 

We shall only sketch the discrete oracle case here for 
comparison. From Eq. ([5]) we get the dynamics 



syra 



p(t + 1) = ouo (t)+<7o,i(*) + 2n [Oi 

where [ ] sym refers to the projection to the G-invariant 
subspace. The operator Oi.o is the unitary realized when 
state 11,0)^ is queried, and has the effect exchanging 
on <-> 7i and /?<->/?*, leading to the equations 



a 2 Jt 



1) 




7o(<) j = 0, 

7j - (*)+«,■_!(*) 0<j<n, (85) 

a n -i(t) j = n. 



da]{t) 
dt 



flm/3 (<) 3 = 0, 

-it < lm(3j(t) - Im /3j_i(t) < j < n, 
-Im/3„_i j = n. 



Now we apply the constraints from the positivity of cr^o 
which imply | Im f3j it) \ < y/aj{t)^j{t). From Eq. (|76|l we 
also have < ctj + jj-i (with a n = 7-i =0). We can 
therefore write at every time 

Impjit) = b j (t)c j+ i(t)a j (t)a J+1 (t), (89) 

where the new parameters represent Bob's degrees of 
freedom but must be consistent with the constraint 



b]{t) + cf (i) < 1 for 
of cij (t) we obtain 



0, 



Canceling a factor 



In combination with the constraint Eq. (|76j) , one can see 
that at every step we can split aj(t) into three pieces: 
one which will get added into cLj +1 (t + 1), one which will 
be added into a^_ 1 (t + 1) and one which will remain in 
aj(t+l). Inductively, we can prove that the set of achiev- 
able vectors after t queries satisfy a,j = for j > t but 
otherwise need only satisfy the normalization constraint 

In particular, this proves that for the XOR problem 
P win = 1/2 for T < n/2 whereas P win = 1 for T = [n/2] , 

7 2 

! (n±i)/2 = 1/2 and the rest zero. 
For oracle interrogation we see that an exact solution 
requires T = n. However, since most of the amplitude of 
the final vector a/ is contained in the indices a n /2±o(^/n) 
the problem can be solved to high accuracy by only cor- 
rectly adjusting these components. This requires a query 
time T = n/2+0(^/n) reproducing the result of van Dam 



rest zero, for n odd 



7} 



E. Continuous oracle dynamics 

From Eq. (J9j) we get the dynamics 
dp(t) 



dt 



-2m [#1,001,0 (*) - cr lj0 (*)#!,()] 



sym 1 



(86) 



dt 



a(t) = M(t)a(t), 



(90) 



where M(t) is the (n + 1) x (n + 1) real antisymmetric 
(as required by probability conservation) matrix which 
is zero everywhere except the entries one-off from the 
diagonal 



M(t) 3 



+1,3 



-b 3 (t)c j+1 (t) (91) 



for j — 0, . . . , n — 1. An extra factor of 1/2 appears in 
the above equation from the relation = 2a 

Note that in the transition to Eq. (|90|) we canceled 
factors of a 3 {t) which potentially could be zero. All this 
implies is that the derivative of a 3 (t) need not satisfy the 
above equation when a 3 = 0. However, this is a set of 
measure zero, and a continuous evolution of a will require 
that the above equation be satisfied at all times. 

Let us rehash the current state of the problem. The 
vector a(t) indicates the state of the system (and hence 
Bob's knowledge of the hidden string) at a given time. 
Bob can affect this parameter by controlling the ma- 
trix M(t) which he can modify at any time. The ma- 
trix M(t) must have the form given by Eq. (f9"Tj) with 
b'j (t) + cj (t) < 1 but otherwise can be chosen arbitrarily. 
Bob must choose the parameters {bj(t), Cj(t)} to evolve 
from the initial condition of a(0) = (1,0,..., 0) in or- 
der to maximize a(T) ■ at at some final time T and with 
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high probability solve the oracle interrogation problem. 
A similar end criterion was formulated above for the XOR 
problem. 

Unfortunately, finding such an optimal evolution is still 
a difficult problem. We shall find below the optimal 
strategies for zero-error oracle interrogation for n = 1 
and n = 2. The latter case is obtained by studying the 
geodesies of S 2 with a Riemannian metric. For n > 2 the 
metrics appear to be of Finsler type, and therefore be- 
yond the scope of this paper. Nevertheless, we shall also 
prove a simple lower bound that will apply both to the 
oracle interrogation and XOR problems and will apply to 
bounded error solutions as well. 



The n = 1 case 



For n = 1 the differential equation reads 



d (ao(t)\ 7T / 1 



a (t) 
ai(t) 



(92) 



with constraints 6g < 1 and c\ < 1 (note that c and 
b\ do not appear anywhere in the equation). The initial 
condition is a(0) = (1,0) and the final vector for zero 
error oracle interrogation is a(T) = a/ = (1, \)j\f2. 

The optimal algorithm is to choose b (t) — ci(t) = 1 
at all times, in which case we obtain the evolution 



a (t) 
ai(t) 



/ cos 7rf/2 
^sinTrf/2 



(93) 




The minimum time required to arrive at the zero error 
final point is T = 1/2. 



G. The n = 2 case 

For n = 2 the differential equation reads 

- Wl {t) \ fa {ty 
-w 2 (t) ai(t) 
w 2 {t) J \a 2 (i), 

(94) 

with w\ = — bQCi and w 2 = —b\c 2 , which are constrained 
by w\ + w 2 < 1. 

If we position the unit sphere so that the vector (0, 1, 0) 
corresponds with the north pole, then effectively, Bob 
can perform any rotation around an axis that lies on the 
equator and at a speed less than or equal to tt/2 radians 
per unit time. Rotations around other axes can only be 
generated as composite rotations. 

Thus far we have restricted ourselves to vectors a from 
the intersection of the non-negative cone with the unit 
sphere. However we can now lift the restriction and al- 
low vectors from the entire unit sphere. The only conse- 
quence of this is that we must identify points that differ 
by changes of sign, as the real state p{t) depends only 
on a 2 (t). We now have to consider two possible starting 



points and eight possible zero-error ending points. The 
symmetry (reflections north-south and east- west) reduces 
the set of inequivalent pairs to only two: starting from 
(1, 0, 0) and ending at either (1, \/2, l)/2 or (-1, \/2, l)/2. 
Note that the paths that connect to the latter point 
would still be allowed under the restriction to the non- 
negative cone, but would have required a "bounce" on a 
boundary. 

We shall now reformulate the problem in the language 
of differential geometry, where the sphere will acquire a 
non-round metric constructed so that the shortest dis- 
tance between two points is equal to the minimum query 
time that is needed to evolve from one point to the 
other. The notation used below will follow the conven- 
tions adopted in general relativity. 

It will be convenient to work in polar coordinates 



ao = sin 9 cos ( 
ai = cos 9, 
a 2 = sin0sin<; 



(95) 
(96) 
(97) 



where the initial condition is now 9 = tt/2, (f> = and the 
final points are 9 = tt/4, = 7r/2±7r/4. Associated to 
this basis we have the coordinate (unnormalizcd) basis 
for the tangent space 

eg — (cos#cos</>, — sin 9, cos sin 0), (98) 
e,/, = (— sin 9 sin 0,0, sin 9 cos 0), (99) 

At any given time, the set of possible velocity vectors 
depends on the current position and the Bob controlled 
parameters tci, w 2 and is given by 




wgeg 



W0 

tan#' 



where we introduced 



Wg = w 2 sin <p — W\ COS ( 
Wcj, — w 2 cos cf) + w\ sin < 



(100) 

(101) 
(102) 



The constraint w\ + w\ < 1 is equivalent to Wg+w 2 < 1 . 
It is always optimal for Bob to choose the magnitude 
of the velocity to be as large as possible consistent with 
the chosen direction, and hence the inequality constraint 
will always be saturated. This produces a set of velocity 
vectors that correspond to unit velocity. The same set 
can be generated by the metric 



ds 2 = 



+ tan 2 9d(j) 2 ) 



(103) 



and therefore the distance assigned to a curve by this 
metric will be equal to the time it would take Bob to 
evolve the system through that curve. One is now left 
with the problem of finding curves of minimal distance 
on the surface with the above metric. 

Strictly speaking the metric is ill defined on the equa- 
tor, where our initial point lies. One can instead study 
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curves that begin at = ir/2 — e and = and then 
bound the distance of these points to the equator. The 
resulting total distance in the limit e — > 0, however, will 
be the same as will be derived below by ignoring the 
divergence at the equator. 

We can also describe the metric by its non-zero com- 
ponents gee = \ and gee = -4 tan 2 0. The Christoffel 
symbols are defined by 



1 



(104) 



and therefore the non-zero symbols for our metric are 
given by 



r _ 19, 2 a - sin6> 



r 



<t> 



1 c/>e 



1 



2 tan 2 6 89 
The geodesic equation is 

dv x 
~dt 



? tan 2 9 



sm ft cos t 



(105) 
(106) 

(107) 



where v is the velocity vector. Using dots for time deriva- 
tives the geodesic differential equations for our metric can 
be written as 



sm ft 

cos 3 9 



sm ft cos ft 

The second equation is solved by 

• 7r tan 9q 
^ ~ 2 tan 2 6' 



(108) 
(109) 

(110) 



where 0o is an arbitrary parameter whose form will be- 
come clear in a moment. The same equation can also 
be obtained directly by the variation of the action with 
respect to <f>. The geodesic equation also implies the con- 
servation of the total speed, which we normalize to one 



1 



(111) 



We can now combine the two previous equations to ob- 
tain a differential equation for 9 



2 



tan^ 6>o 



1 



tan 2 



(112) 



where the meaning of 0o becomes clear: it defines the 
maximum height of the geodesic curve. The differential 
equation is solved by 



7T 

-t = ± 

2 



cos(0q) sin 0c20 



\J cos 2 O sin 2 9 
cos 9 n d(cos 9) 
%/cos 2 6*o — cos 2 
cos 



sin 2 6*o cos 2 i 



cos ft o arcsm 



cos fto 



(113) 



where in the last step we have chosen our constant and 
sign so that t — corresponds to the initial condition of 
9 = 7r/2, and as time increases we move north. 

Now we turn to the differential equation for <j) which 
can be obtained by substituting the above solution into 
Eq. fTT0j) 



7r tan fto / 1 ^ 



± 



2 \ 1 — cos 2 i 
7r tan fto / 1 



(114) 



2 U -cos 2 0o sin 2 ^ 



Using the derivative 



ds 



arctan (sin 9 Q tan s) 



Sm fto r o ~ 11 

^ 1 + sin 2 O tan 2 s 

COS J s J 

sin 0o 



1 — cos 2 0o sin 2 s 



(115) 



we obtain 




7rf tan 0o / 7ri \ 

© = h arctan sm 0o tan — (116) 

r 2 V 2cos0 o y 

• « • /cos0\ 

= — sm 0o arcsm — + arctan 

\ cos O ) 

with a choice of the additive constant and sign so that 
cj> = at t = 0, and <f> increases with time. Unfortunately, 
solving for the constant 0o seems to require solving a tran- 
scendental equation, and therefore the calculation needs 
to be completed numerically. 

Of course there are many geodesies that connect the 
points that we are interested in. Before proceeding with 
a numerical solution, we must ensure that we are exam- 
ining the shortest geodesic. 

The geodesies all start at the equator, rise up to some 
height cos 0o , and then fall back again to the equator so 
that the curve is symmetric around the apex. During the 
transition from = 7r/2 to = 0o we effect the following 
increases: 



At = cos 0o, 
A0 = |(l-sin0 o ). 



(117) 
(118) 



Also note that if we remove the sin 0o factor from inside 
the arctan we increase the right-hand side of Eq. (| 11 6[) . 
Without that factor however, the arctan is equivalent to 
and arcsin and so we have 



< (1 — sin 0o ) arcsin 



COS0 
COS 0Q 



(119) 



We learn two things from the above observations. First, 
we learn that on the way up, <j> < (1 — l/y/2)n/2 < 7r/4 
at = 7r/4 so that we must pass the apex at least once 
before arriving at the zero-error solution. Second, we 
need a solution with 0q < 7r/4 and hence the time to 
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climb to the apex and return to the equator is at least 
2/-v/2 > 1 which is more time than it takes to query the 
two bits separately. Therefore the optimal solution must 
rise to the apex once, and arrive at either (j> = tt/4 or 
(j) = "Sir /A on the way down. The time of arrival for such 
a trip is 



T = 2 cos ( 



, 1 . / cos6> 

1 arcsm — 

7T V cos & 



(120) 



which increases as cos 0$ gets larger. Since a geodesic to 
cj> = 3tt/4 will require a larger cos#o than one to (j) = 7r/4 
we have proven that the shortest path to a zero error 
point arrives at cf> = w/4 after crossing through the apex 
exactly once. The total increase in <f> over such a path 
is given by twice the right hand side of Eq. (|118[) minus 
the right hand side of Eq. (|1 16[) . Substituting into this 
equation 9 = 7r/4 and <f> — 7r/4 we can numerically solve 
for cos 6*o — 0.7477. Using this value in the above equa- 
tion we find that the query time needed to exactly solve 
the n = 2 case of oracle interrogation is 



T~ 0.9052. 



(121) 



That is, only about 90% of the time it would require to 
query both bits separately. 



H. Lower bound 



Using Aj > a/, bj-i < 1 and Cj < 1 we obtain 



dt 



~ 2 3 



(124) 



An inductive solution can be constructed because we 
know that for all time Ao(t) = 1 by conservation of prob- 
ability, and the remaining initial conditions are Aj(0) = 
for j > 0. Therefore 



(125) 



In particular, we know from Eq. (|83p that we can re- 
late the probability of success to the above variables by 
P W in(T) < | + Ay n/2 \{T). Therefore, the query time 
needed to solve the Hamiltonian versions of XOR and or- 
acle interrogation with bounded error is at least 







T > 










n 


> 






ne 



i/LfJ 



i/LfJ 



(126) 



To conclude we shall prove a weak but fairly simple 
lower bound on the query time needed to solve the Hamil- 
tonian oracles for XOR and oracle interrogation even in 
the bounded error setting. 

From the discrete case we learn that in general am- 
plitude moves from the variables aj with low values of 
j to the ones with high values of j. We also know that 
after only t queries, the variables a.j with j > t are zero. 
Though this no longer holds in the continuous case, it 
does motivate the study of the variables 



\ ^ a 

\ k= 3 



(122) 



From the dynamical of Eq. (f9T)]) we have for j > 
^ = 2±a k (t) da ^ 



dt 



k= 3 



dt 



(123) 



7r&j-i(*)cj(*)aj(*)ai-i(*). 



The bound is likely weak in the continuous case, and 
certainly weak as a lower bound of the discrete case. 
Nevertheless, it captures the essential 0(n) scaling. The 
main open question is: can similar continuous methods 
be used to prove lower bounds for new problems? 
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